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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims : 

1 . (Currently Amended) A validation protocol for determining authenticity of a printer 
consumable, said protocol including the steps of: 

providing a printer containing a first authentication chip and a printer consumable 
containing a second authentication chip; 

generating a secret random number and calculating a signature for the secret random 
number using a signature function, in the first chip, the first chip having a random function 
to produce random numbers from a seed, and the function advances after each successful 
validation, so that the next random number is produced from a new seed; 

encrypting the secret random number and the signature by a symmetric encryption 
function using a first key, in the first chip; 

passing the encrypted secret random number and signature from the first chip to the 
second chip; 

decrypting the encrypted secret random number and signature with a symmetric 
decryption function using the first key, in the second chip; 

calculating a signature for the decrypted secret random number using the signature 
function, in the second chip; 

comparing the signature calculated in the second chip with the signature decrypted, 
in the second chip; 

in the event that the two signatures match, in the second chip, encrypting the 
decrypted secret random number and a memory vector of the second chip b y the symmetric 
encryption function using a second key to produce a first number and returning sending the 
memory vector and the encrypted secret random number first number to the first chip; 

calling a test function in the first chip , the test function being called by the first chip 
first receiving , a plural and random number of times, a the memory vector and the first 
numbe r, then receiving the encrypted secret random number from the second chip, the plural 
and random number of times being determined based on a clock signal, the test function 
including: 

encrypting the secret random number and the received memory vector by the 
symmetric encryption function using the second key, in the first chip, to produce a 
second number; 
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comparing , up to said plural and random number of times, the second number 
with the first number, in the first chip , the first number being selected such that tho 
comparison should never return a match in the first chip , 

in tho event that tho current comparison with tho first number returns a 
match, considering the first chip to be invalid and terminating the protocol; 

in tho event that all of tho comparisons with tho first number return a 
mismatch, comparing the second number with the encrypted secret random number 
from tho second chip, in tho first chip; 

in the event that the comparison with the encrypted secret random number 
from tho second chip r eturns a match, considering the second chip to be valid and 
authorizing use of the printer consumable; and 

in the event that the comparison with tho encrypted secret random number 
from the second chip r eturns a mismatch, considering the second chip to be invalid 
and denying use of the printer consumable. 

2. (Previously Presented) The protocol according to claim 1, where the first and second 
keys are held in both the first and second authentication chips, and are kept secret. 

3. (Cancelled) 

4. (Previously Presented) The protocol according to claim 1, where the symmetric 
decrypt function is held only in the second chip. 

5. (Previously Presented) The protocol according to claim 1, where the signature 
function generates digital signatures of 160 bits. 

6. (Cancelled) 

7. (Previously Presented) The protocol according to claim 6, where the time taken to 
return an indication the second chip is invalid is the same for all bad inputs, and the time 
taken to return the secret random number encrypted with the second key is the same for all 
good inputs. 
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8. (Previously Presented) The protocol according to claim 1, where a test function is 
held only in the first chip to advance the secret random number if the second chip is valid; 
otherwise it returns an indication the second chip is invalid. 

9. (Previously Presented) The protocol according to claim 8, where the time taken to 
return an indication the second chip is invalid is the same for all bad inputs, and the time 
taken to return an indication the second chip is valid is the same for all good inputs. 

10. (Original) The protocol according to claim 1, where it is used to determine the 
physical presence of a valid authentication chip. 

1 1 . (Previously Presented) A validation system for performing the method according to 
claim 1 , where the system includes a printer containing a first authentication chip and a 
printer consumable containing a second authentication chip; where the first authentication 
chip includes a random number generator, a symmetric encryption function and two keys for 
the function, a signature function and a test function; and the second authentication chip 
includes a symmetric encryption and decryption function and two keys for these functions, a 
signature function, and a prove function to decrypt a secret random number and signature 
encrypted using the first key by the first authentication chip, and to calculate another 
signature from the decrypted secret random number, for comparison with the decrypted 
signature, and in the event that the comparison is successful to encrypt the secret random 
number with the second key and send the encrypted secret random number back; the test 
function in the first chip then operates to generate an encrypted version of the secret random 
number using the second key and to compare the encrypted secret random number with the 
received version to validate the second chip, where the first authentication chip contains a 
random function to produce random numbers from a seed, and the function advances after 
each successful validation, so that the next random number will be produced from a new 
seed. 

12. (Previously Presented) A validation system according to claim 11, where the 
remainder of the system is software, hardware or a combination of both, but the first chip is 
a physical authentication chip. 
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13. (Original) A validation system according to claim 11, where both chips have the 
same internal structure. 

14. (Original) A validation system according to claim 11, where the first and second 
keys are kept secret. 

15. (Cancelled) 

16. (Original) A validation system according to claim 11, where the signature function 
generates digital signatures of 160 bits. 

17. (Previously Presented) A validation system according to claim 11, where the prove 
function returns an indication the second chip is invalid for all bad inputs and the time taken 
to do this is the same for all bad inputs, and the time taken to return the secret random 
number encrypted with the second key is the same for all good inputs. 

18. (Previously Presented) A validation system according to claim 11, where the test 
function advances the secret random number if the second chip is validated. 

19. (Previously Presented) A validation system according to claim 11, where the time 
taken for the test function to return an indication the second chip not validated is the same 
for all bad inputs, and the time taken to return an indication that the second chip is validated 
is the same for all good inputs. 

20. (Original) A validation system according to claim 1 1, where it is used to determine 
the physical presence of a valid authentication chip. 



